This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json) Hash identifier: Me8O+Nakb5XgVC5orxc1haKejl6vKb9PZr5gC73tB5g= Subject key identifier: 9E:38:97:D3:93:DF:49:98:16:57:6A:D7:DA:4B:37:66:79:80:C9:A0 Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67 Certificate serial: 019B71EBE33216C179B67FFBD620928FF3B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft Manifest number: 17A7 Signing time: Wed 31 Dec 2025 01:00:43 +0000 Manifest this update: Wed 31 Dec 2025 01:00:43 +0000 Manifest next update: Thu 01 Jan 2026 01:00:43 +0000 Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: YiHzXthWDR322+f6zoxOUHEJhTYqqGehqq/iYq5nEw8=) 2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:eb:e3:32:16:c1:79:b6:7f:fb:d6:20:92:8f:f3:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67 Validity Not Before: Dec 31 01:00:43 2025 GMT Not After : Jan 1 01:00:43 2026 GMT Subject: CN=9e3897d393df499816576ad7da4b37667980c9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:53:0e:19:5d:ba:5f:09:65:e0:18:4d:6b: b5:a1:35:22:ff:ac:d3:82:c5:63:5b:90:1b:58:3f: b1:6a:48:e4:47:86:29:8a:38:47:31:5a:42:fc:df: f9:87:bf:42:e3:41:a6:5b:2a:40:ff:a7:35:84:c9: 6e:a4:26:5d:aa:e1:44:59:13:46:f2:2b:18:90:65: e0:23:ed:c9:4b:0e:ab:75:ba:e5:1f:e3:aa:19:93: bf:e9:79:b4:01:ae:05:07:08:fd:f9:ca:2f:42:30: 4f:19:b0:9d:12:00:94:8a:ef:b8:aa:a5:e1:01:39: 84:a7:f3:f9:1a:af:83:19:53:4d:5b:4f:d4:c2:9b: 39:d8:f4:5b:14:27:1f:95:e2:0b:d2:c2:9e:78:04: 81:ae:8b:f1:7e:74:74:41:d9:01:f2:e6:28:0f:17: e6:33:ab:f0:48:b6:58:82:0e:6f:5c:14:15:43:d1: 14:66:72:cf:ca:25:58:0b:7f:3f:11:00:4e:b1:21: c8:46:cd:89:f3:cf:ab:95:cb:45:62:d1:ac:60:8c: bf:a2:04:0c:9f:02:e9:4a:54:27:38:39:ff:a4:93: e9:bd:36:62:f2:9e:d5:47:f8:f8:79:63:57:76:c1: bd:43:c6:cc:c8:b1:4d:8e:f4:dc:8f:61:36:29:7e: cb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:38:97:D3:93:DF:49:98:16:57:6A:D7:DA:4B:37:66:79:80:C9:A0 X509v3 Authority Key Identifier: keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:01:8b:da:58:f2:13:e7:10:33:d8:23:26:5d:40:05:61:47: 09:3e:a8:1a:74:27:66:1f:97:ff:ee:ef:c4:f7:87:7e:b7:95: bd:fb:07:56:34:ed:f6:25:df:03:5a:50:81:61:20:1b:96:2e: 83:7b:2b:6f:7b:7c:0b:45:95:cf:58:3b:aa:85:d6:17:ba:17: 1b:24:38:01:1d:a8:27:23:1e:90:99:3d:58:98:43:b6:8f:de: 3d:bb:0e:32:8c:91:1d:33:3d:bf:f8:fe:e1:7f:86:12:d4:4f: c1:30:7b:7b:c9:32:b1:a1:a1:e9:86:27:7a:79:a5:6b:12:9b: 76:2d:3d:1d:98:df:8b:0b:c0:94:68:13:3c:7e:63:35:94:d5: 19:3f:51:56:e7:b3:d1:e7:59:2c:d2:05:3d:5f:ed:b2:f9:b1: 82:8d:6c:d3:90:4d:5b:2c:04:fa:99:d6:52:27:7e:5c:e2:94: 16:42:fa:20:04:9f:f8:99:59:5d:4e:19:24:c2:b3:0c:5b:da: ef:3d:dc:43:a6:a9:48:41:5f:13:fa:4f:ac:6f:a7:2f:80:bb: 01:16:f2:bc:b5:2d:cd:71:09:c0:79:5d:68:44:be:10:2d:6a: 62:a1:ef:9b:7d:52:c2:6a:d4:e9:32:a5:41:db:89:48:55:13: 82:68:9b:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtx6+MyFsF5tn/71iCSj/O2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YWFhYzA1OTk2YTViNDYxNGM2ZWVkYWZmZTdmOGY1Zjlh MmJjNjcwHhcNMjUxMjMxMDEwMDQzWhcNMjYwMTAxMDEwMDQzWjAzMTEwLwYDVQQD Eyg5ZTM4OTdkMzkzZGY0OTk4MTY1NzZhZDdkYTRiMzc2Njc5ODBjOWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCdTDhldul8JZeAYTWu1oTUi/6zT gsVjW5AbWD+xakjkR4YpijhHMVpC/N/5h79C40GmWypA/6c1hMlupCZdquFEWRNG 8isYkGXgI+3JSw6rdbrlH+OqGZO/6Xm0Aa4FBwj9+covQjBPGbCdEgCUiu+4qqXh ATmEp/P5Gq+DGVNNW0/Uwps52PRbFCcfleIL0sKeeASBrovxfnR0QdkB8uYoDxfm M6vwSLZYgg5vXBQVQ9EUZnLPyiVYC38/EQBOsSHIRs2J88+rlctFYtGsYIy/ogQM nwLpSlQnODn/pJPpvTZi8p7VR/j4eWNXdsG9Q8bMyLFNjvTcj2E2KX7LywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ44l9OT30mYFldq19pLN2Z5gMmgMB8GA1UdIwQY MBaAFNiqrAWZaltGFMbu2v/n+PX5orxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYt ZjUzZWUzMmVkODE2LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYtZjUzZWUzMmVkODE2 LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwGL2ljy E+cQM9gjJl1ABWFHCT6oGnQnZh+X/+7vxPeHfreVvfsHVjTt9iXfA1pQgWEgG5Yu g3srb3t8C0WVz1g7qoXWF7oXGyQ4AR2oJyMekJk9WJhDto/ePbsOMoyRHTM9v/j+ 4X+GEtRPwTB7e8kysaGh6YYnenmlaxKbdi09HZjfiwvAlGgTPH5jNZTVGT9RVuez 0edZLNIFPV/tsvmxgo1s05BNWywE+pnWUid+XOKUFkL6IASf+JlZXU4ZJMKzDFva 7z3cQ6apSEFfE/pPrG+nL4C7ARbyvLUtzXEJwHldaES+EC1qYqHvm31SwmrU6TKl QduJSFUTgmibcw== -----END CERTIFICATE-----Generated at Wed Dec 31 10:16:18 2025 by rpki-client